Skip to content
News·noyb - European Center for Digital RightsEN
Export

GDPR Omnibus: EU “simplification” far removed from real business needs

GDPR Policy Ever since the European Commission has published its Digital Omnibus proposal, discussions about the workload the GDPR creates for businesses in Europe have intensified.

Full text

GDPR Policy Ever since the European Commission has published its Digital Omnibus proposal, discussions about the workload the GDPR creates for businesses in Europe have intensified. Among other things, the Commission wants to restrict the Right of Access, allegedly to reduce the regulatory burden. But do these changes actually reflect the needs of privacy professionals working at companies? To find out more, noyb conducted a survey asking Data Protection Officers (DPOs) which elements of the GDPR take up most of their time – and where it is best spent to ensure people's data protection.Turns out, most professionals don’t want protections to be cut back, but to reduce documentation duties and paperwork. In many cases, they even ask for clearer laws instead of more ‘flexibility’, which is hard to manage for most companies. Download the Survey here! Input straight from the source. The European Commission’s key argument for changing the GDPR is reducing the alleged ‘regulatory burden’ for

How it connects

W101 2326836-1 40 natural persons submitted access requests to a mobile communications provider (controller) via an attorney Some of these persons were (former) customers of the controller, others have never been in a contractual relationship with the controller. In the access requests, the data… BVwG - W101 2326836-1 ·Federal Administrative Court Oct 2, 2026 Personal Data Right of Access Right to Restriction
C/09/697386 / HA ZA 26-52 Den Haag District Court: 51 gamblers sue Unibet operator Risepoint over unanswered GDPR The District Court of The Hague (the Court) considered an action brought by 51 individuals who had participated in online gambling offered through the website Unibet before 1… Rb. Den Haag Sep 2, 2026 Right of Access Personal Data Data Portability
€100,000 HDPA fines Teleperformance for failing to properly handle employee access request The DPA received a complaint from a former employee of the Service 800 Teleperformance Single Member S.A. (the controller), after the controller failed to comply with the data… Greece ·Art. 5, 12, 13 +3 Personal Data Right of Access Storage Limitation
200.361.079/01 Court of Appeal Den Haag: gambling operator must disclose transaction data under Art. 15 The data subject submitted an access request, in electronic format, of his gambling data to Risepoint Limited (the controller), the operator of online gambling services in the… Sep 29, 2026 Personal Data Data Portability Right of Access
Danish DPA finds employer unlawfully refused former employee's access request The DPA received a complaint from a former employee (data subject) of the controller concerning the refusal of an access request. More specifically, the data subject was dismissed… 2025-31-2078 ·Denmark ·Datatilsynet (DK) Sep 24, 2026 Right of Access Personal Data Supervisory Authorities
RON 5,242 Spitalul Veterinar Tineretului SRL A data subject filed an access request with the veterinary clinic Spitalul Veterinar Tineretului SRL (controller) concerning copies of a telephone conversation and video… Romania ·ANSPDCP ·Art. 15 Oct 13, 2026 Personal Data Right of Access Controllers